PyPI/snowflake-connector-python CVE-2025-24795: medium 4.4, EPSS 0.14%

snowflake-connector-python vulnerable to insecure cache files permissions

Action: Upgrade snowflake-connector-python to 3.13.1 or later.

pip install snowflake-connector-python==3.13.1

Affected

Fixed versions

Sources

• osv: GHSA-r2x6-cjg7-8r43
• https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-r2x6-cjg7-8r43
• https://nvd.nist.gov/vuln/detail/CVE-2025-24795
• https://github.com/snowflakedb/snowflake-connector-python/commit/3769b43822357c3874c40f5e74068458c2dc79af
• https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2025-28.yaml
• https://github.com/snowflakedb/snowflake-connector-python
• https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.13.1

CVE-2025-24795 · published 2025-01-29T20:49:59Z · modified 2026-09-10T03:50:22.180562894Z · JSON